Activity log for bug #1510824

Date Who What changed Old value New value Message
2015-10-28 08:23:34 Dariusz Gadomski bug added bug
2015-10-28 09:10:46 Martin Pitt bug added subscriber Martin Pitt
2015-10-28 09:52:29 Louis Bouchard nominated for series Ubuntu Wily
2015-10-28 09:52:29 Louis Bouchard bug task added policykit-1 (Ubuntu Wily)
2015-10-28 09:52:29 Louis Bouchard nominated for series Ubuntu Trusty
2015-10-28 09:52:29 Louis Bouchard bug task added policykit-1 (Ubuntu Trusty)
2015-10-28 09:52:29 Louis Bouchard nominated for series Ubuntu Vivid
2015-10-28 09:52:29 Louis Bouchard bug task added policykit-1 (Ubuntu Vivid)
2015-10-28 10:41:55 Dariusz Gadomski policykit-1 (Ubuntu): assignee Dariusz Gadomski (dgadomski)
2015-10-28 13:17:09 Dariusz Gadomski description There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable SUCCESS The 'SUCCESS' part is never read so the authentication never ends successfully. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install) There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable SUCCESS The 'SUCCESS' part is never read so the authentication never finishes successfully. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install)
2015-11-10 09:10:23 Dariusz Gadomski summary PolkitAgentSession ignores multiline output (with pam_vas) PolkitAgentSession incorrectly handles multiline output (with pam_vas)
2015-11-10 09:11:26 Dariusz Gadomski description There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable SUCCESS The 'SUCCESS' part is never read so the authentication never finishes successfully. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install) There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install)
2015-11-10 09:11:43 Dariusz Gadomski summary PolkitAgentSession incorrectly handles multiline output (with pam_vas) PolkitAgentSession incorrectly handles multiline output (as observed with pam_vas)
2015-11-10 10:10:07 Dariusz Gadomski bug watch added https://bugs.freedesktop.org/show_bug.cgi?id=92886
2015-11-10 10:10:07 Dariusz Gadomski bug task added policykit-1
2015-11-11 12:06:06 Bug Watch Updater policykit-1: status Unknown Incomplete
2015-11-11 12:06:06 Bug Watch Updater policykit-1: importance Unknown Medium
2015-11-13 17:24:28 Bug Watch Updater policykit-1: status Incomplete Confirmed
2015-11-20 13:26:53 Bug Watch Updater policykit-1: status Confirmed Fix Released
2015-11-20 14:44:07 Dariusz Gadomski description There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install) [Impact] * An explanation of the effects of the bug on users and * justification for backporting the fix to the stable release. * In addition, it is helpful, but not required, to include an explanation of how the upload fixes this bug. [Test Case] * Use a pam module that returns a multi-line PAM_TEXT_INFO message on successful authentication (may require to artificially modify a pam module). * Perform a polkit authorization with e.g. pkexec ls * Correct authorization should end with a failure with an unrecognized PAM message [Regression Potential] * Fix makes advantage of the fact that polkit authentication agent already un-escapess (g_strcompress) all input from the helper component. * Fix is a backport of an upstream change. [Other Info] * Original bug description: There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install)
2015-11-20 14:48:15 Dariusz Gadomski description [Impact] * An explanation of the effects of the bug on users and * justification for backporting the fix to the stable release. * In addition, it is helpful, but not required, to include an explanation of how the upload fixes this bug. [Test Case] * Use a pam module that returns a multi-line PAM_TEXT_INFO message on successful authentication (may require to artificially modify a pam module). * Perform a polkit authorization with e.g. pkexec ls * Correct authorization should end with a failure with an unrecognized PAM message [Regression Potential] * Fix makes advantage of the fact that polkit authentication agent already un-escapess (g_strcompress) all input from the helper component. * Fix is a backport of an upstream change. [Other Info] * Original bug description: There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install) [Impact]  * Some PAM modules produce output of more than 1 line (e.g. PAM_TEXT_INFO may contain newlines in the message content). Polkit authentication agent is prepared to receive only single-line messages so it treats each line as a separate message. It fails to recognize the type of message for all of them except the first - hence failed authorization even if it was successful on the PAM-level.  * The PAM specification does not require the modules to send only single-line messages. Thus, polkit needs to be fixed. * The helper component should escape (g_strescape) all messages before sending it up to the authentication agent. This way everything will be read as a single line and then unescaped to restore it's formatting with no changes required in PAM modules. [Test Case]  * Use a pam module that returns a multi-line PAM_TEXT_INFO message on successful authentication (may require to artificially modify a pam module).  * Perform a polkit authorization with e.g. pkexec ls  * Correct authorization should end with a failure with an unrecognized PAM message [Regression Potential]  * Fix makes advantage of the fact that polkit authentication agent already un-escapess (g_strcompress) all input from the helper component. * Fix is a backport of an upstream change. [Other Info]  * Original bug description: There is an error observed when Ubuntu is configured to perform authentication via pam_vas (Vintela Authentication Services by Dell) in a disconnected mode (using cached authentication). Steps to reproduce: 1. Configure pam_vas client authenticating to a remote server. 2. Perform authentication to cache the credentials. 3. Disconnect from the network where the server is reachable (to force using cached information). 4. Perform an action requiring polkit authentication. Expected result: Authentication succeeds accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Actual result: Authentication fails accompanied by the following message "You have logged in using cached account information. Some network services will be unavailable". Probable cause: The PolkitAgentSession part of polkit is designed to interpret only 1-line output, while interaction with pam_vas in the above scenario triggers helper to produce the following 2-line output: PAM_TEXT_INFO You have logged in using cached account information. Some network services will be unavailable. The 'will be unavailable.' part is interpreted as an unknown message and causes failed authorization. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: policykit-1 0.105-4ubuntu2.14.04.1 ProcVersionSignature: Ubuntu 3.16.0-52.71~14.04.1-generic 3.16.7-ckt18 Uname: Linux 3.16.0-52-generic x86_64 NonfreeKernelModules: nvidia zfs zunicode zcommon znvpair zavl ApportVersion: 2.14.1-0ubuntu3.18 Architecture: amd64 CurrentDesktop: Unity Date: Wed Oct 28 09:01:37 2015 InstallationDate: Installed on 2015-04-13 (197 days ago) InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1) SourcePackage: policykit-1 UpgradeStatus: No upgrade log present (probably fresh install)
2015-11-20 14:49:53 Dariusz Gadomski attachment added xenial_policykit-1_0.105-13ubuntu1.debdiff https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/+attachment/4522623/+files/xenial_policykit-1_0.105-13ubuntu1.debdiff
2015-11-20 14:50:20 Dariusz Gadomski attachment added wily_policykit-1_0.105-11ubuntu3.debdiff https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/+attachment/4522624/+files/wily_policykit-1_0.105-11ubuntu3.debdiff
2015-11-20 14:50:40 Dariusz Gadomski attachment added vivid_policykit-1_0.105-8ubuntu5.debdiff https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/+attachment/4522625/+files/vivid_policykit-1_0.105-8ubuntu5.debdiff
2015-11-20 14:50:58 Dariusz Gadomski attachment added trusty_policykit-1_0.105-4ubuntu3.14.04.1.debdiff https://bugs.launchpad.net/ubuntu/+source/policykit-1/+bug/1510824/+attachment/4522626/+files/trusty_policykit-1_0.105-4ubuntu3.14.04.1.debdiff
2015-11-20 15:11:01 Dariusz Gadomski bug added subscriber Ubuntu Sponsors Team
2015-11-20 15:11:10 Dariusz Gadomski bug added subscriber Ubuntu Stable Release Updates Team
2015-11-20 15:42:43 Mathew Hodson policykit-1 (Ubuntu): status New Triaged
2015-11-20 15:42:45 Mathew Hodson policykit-1 (Ubuntu): importance Undecided Medium
2015-11-20 15:42:47 Mathew Hodson policykit-1 (Ubuntu Trusty): status New Triaged
2015-11-20 15:42:49 Mathew Hodson policykit-1 (Ubuntu Trusty): importance Undecided Medium
2015-11-20 15:42:52 Mathew Hodson policykit-1 (Ubuntu Vivid): status New Triaged
2015-11-20 15:42:54 Mathew Hodson policykit-1 (Ubuntu Vivid): importance Undecided Medium
2015-11-20 15:42:56 Mathew Hodson policykit-1 (Ubuntu Wily): status New Triaged
2015-11-20 15:42:59 Mathew Hodson policykit-1 (Ubuntu Wily): importance Undecided Medium
2015-11-23 10:27:27 Martin Pitt policykit-1 (Ubuntu Trusty): status Triaged In Progress
2015-11-23 10:27:28 Martin Pitt policykit-1 (Ubuntu Vivid): status Triaged In Progress
2015-11-23 10:27:30 Martin Pitt policykit-1 (Ubuntu Wily): status Triaged In Progress
2015-11-23 10:28:12 Martin Pitt removed subscriber Ubuntu Sponsors Team
2015-11-23 10:40:26 Martin Pitt policykit-1 (Ubuntu): status Triaged Fix Committed
2015-11-23 11:48:37 Launchpad Janitor policykit-1 (Ubuntu): status Fix Committed Fix Released
2015-11-24 21:12:59 Chris J Arges policykit-1 (Ubuntu Trusty): status In Progress Fix Committed
2015-11-24 21:13:04 Chris J Arges bug added subscriber SRU Verification
2015-11-24 21:13:12 Chris J Arges tags amd64 apport-bug sts trusty amd64 apport-bug sts trusty verification-needed
2015-11-24 21:14:24 Chris J Arges policykit-1 (Ubuntu Vivid): status In Progress Fix Committed
2015-11-24 21:15:01 Chris J Arges policykit-1 (Ubuntu Wily): status In Progress Fix Committed
2015-11-25 14:41:14 Istvan bug added subscriber Istvan
2015-11-25 14:50:03 Martin Pitt tags amd64 apport-bug sts trusty verification-needed amd64 apport-bug sts trusty verification-done-trusty verification-needed
2015-11-26 12:23:55 Dariusz Gadomski tags amd64 apport-bug sts trusty verification-done-trusty verification-needed amd64 apport-bug sts trusty verification-done
2015-12-02 18:40:24 Chris J Arges removed subscriber Ubuntu Stable Release Updates Team
2015-12-02 18:45:57 Launchpad Janitor policykit-1 (Ubuntu Vivid): status Fix Committed Fix Released
2015-12-02 18:46:23 Launchpad Janitor policykit-1 (Ubuntu Wily): status Fix Committed Fix Released
2015-12-02 18:50:27 Launchpad Janitor policykit-1 (Ubuntu Trusty): status Fix Committed Fix Released